Vast Loophole

The loophole scanning tool was completed.

Li Yi began to test.

He went onto the Hackerone platform, registered an account, and logged into the platform. He entered the loophole testing project initiated by a certain company and obtained the IP address of the relevant server. Next, Li Yi pressed the button to activate his homemade loophole scanning tool.

In the next second, green codes surged crazily like a waterfall. The loophole scanning tool worked smoothly, and the various modules began to work to analyze the loophole situation of the service station.

…

Wind Valley Technology was a public software company headquartered in Demon City. Its goal was to promote a deep fusion of informationization and industrialization to increase the intelligence level of the city. Its business covered steel, transportation, medicine, chemicals, finance, and many other industries. It is especially active in the software field and greatly valued software safety and system safety.

The person in charge of Wind Valley's technology department, Zhang Peiyong, turned on his computer as usual the moment he went to work. He checked his email and reviewed the work progress of his subordinates before planning his next step.

Suddenly, a knock on the door interrupted Zhang Peiyong's thoughts.

"Please come in!" Zhang Peiyong looked up at the door.

"Brother Yong, something bad has happened. A lot of bugs have been discovered in the Rong City Wisdom Cloud Project. The workload of modifying these bugs will almost be equivalent to doing it all over again." A young man with sparse hair, Zhao Xiaohui, pushed the door open and reported with a sad expression.

"The Wrong City Wisdom Cloud Project? The project that was released on the platform?" Zhang Peiyong looked at Zhao Xiaohui calmly and asked.

"Yes! A lot of loopholes have been discovered by an expert." Zhao Xiaohui confirmed with a bitter expression.

Zhang Peiyong hurriedly opened the platform and logged into the back-end of the platform.

The next moment, the website displayed loophole data one after another. RCE loophole, SQL injection loophole, account hijacking loophole, CORS, CSRF, source code leak, speed limit… etc. There were a total of 227 loopholes.

Zhang Peiyong's scalp turned numb.

There were so many of them?

Was this true?!

Zhang Peiyong was filled with disbelief as he casually opened a line of data.

This loophole was targeted at a subdomain target. When using the Dirb directory, it discovered the .git directory. When it probed deeper with the gitpillage, the POST parameters it called up were not filtered and were related to a remote code execution loophole.

Zhang Peiyong's expression tightened. He immediately tested it according to the description of the loophole.

Zhang Peiyong placed his hands on the keyboard and typed noisily. Soon, according to the description of the loophole, he directly entered the loophole of the Rong City Wisdom Cloud Project.

Damn it!

There was really such a loophole.

Zhang Peiyong panicked and continued to test the next loophole in disbelief.

Soon, Zhang Peiyong checked everything according to the description of the person who discovered the loophole and successfully obtained all the source code of the application service on the site. This loophole was much more serious than the threat of the previous RCE leak.

A drop of cold sweat fell from Zhang Peiyong's forehead.

If this loophole was not discovered, once the project went online and this loophole was taken advantage of, it would seriously threaten the customer's data safety.

Zhang Peiyong took a deep breath and continued to look at the next loophole.

This was an account hijacking loophole. By changing the email address to the email address of another user, one could use the password contained in the request library to replace the password of another person's account. The entire process did not require any verification mechanism.

Zhang Peiyong tested five to six loopholes in a row, and every loophole really existed.

Very good, very good!

Zhang Peiyong was both angry and happy, his feelings very complicated.

The reason for his anger was that his technical team had written lousy code that was filled with loopholes. It was simply a pile of trash.

The reason for his happiness was that these problems had been discovered and had not troubled the customers, preventing a huge risk.

"Brother Yong, what should we do next?" Seeing Zhang Peiyong's furious expression, Zhao Xiaohui asked nervously.

"What should we do? Don't you know?! They've already helped us find the loophole. Are we just going to ignore them? Inform everyone to gather in the meeting room!" Zhang Peiyong shouted angrily.

"Alright!" Zhao Xiaohui bowed and left the office as if he was escaping.

Zhang Peiyong stood up and rushed to the meeting room angrily to arrange for the modification mission.

Soon, the screams of the programmers sounded from the meeting room.

More than 200 loopholes had to be corrected within the stipulated time limit. With such a huge workload, they were destined to work overtime for a long period of time in the future. They could forget about weekends, holidays, and the like.

As Zhang Peiyong watched his subordinates leave dejectedly, Zhang Peiyong's face was also filled with worry. He had originally planned to spend the weekend with his daughter. With such a serious problem with the project, he definitely could not leave.

Zhao Xiaohui looked at Zhang Peiyong nervously and asked, "Brother Yong, how should we reward the person who discovered the loopholes? He discovered more than 200 loopholes. If the reward is too much, the finance department will definitely not approve this sum of money."

Hearing this, Zhang Peiyong's expression became even uglier.

Normally speaking, when a loophole was found, the person who discovered it would usually be rewarded with thousands or even tens of thousands of yuan. If it were Microsoft, Apple, and other international giants, they would even provide hundreds of thousands or tens of millions of yuan.

A few thousand yuan per loophole was already very little.

Even if they only paid a few thousand for a single loophole, it would still cost the company nearly a million. To the company, this was not a small expenditure. It would be strange if the financial manager did not find trouble with him.

Moreover, he still had to give the other party the money. Since this guy could discover so many loopholes, he was definitely a technical expert. Who knew if there were any other loopholes the other party did not tell them about?

It was not appropriate to give too little.

Thinking of this problem, Zhang Peiyong immediately felt troubled.

"Brother Yong, if there's nothing else, I'll get busy first!" Seeing Zhang Peiyong's expression become uglier and uglier, Zhao Xiaohui hurriedly bade farewell.

"Wait, I have a mission for you." Zhang Peiyong hurriedly stopped Zhao Xiaohui.

Zhao Xiaohui stopped in his tracks and revealed a regretful expression. He wished he could slap himself.

He regretted what he said earlier.

"Brother Yong, what mission?" Zhao Xiaohui turned around and asked with a bitter smile.

"Contact this expert and bargain with him." Zhang Peiyong arranged.

"Brother Yong, I don't know how to bargain! Can't you talk to him yourself?!" Zhao Xiaohui revealed a difficult expression and said awkwardly.

Zhang Peiyong looked at Zhao Xiaohui and reminded, "Talk to him first. If you don't reach an agreement, I'll take action. There has to be a transition, understand?"

"Alright! Brother Yong, what's the expected price?" Zhao Xiaohui nodded and asked.

"Of course it's better if there's as little as possible. Let's pay him 2,000 to 3,000 yuan per loophole. If it's a serious loophole, keep it within 10,000 yuan. Try and see if you can negotiate." Zhang Peiyong replied.

"Brother Yong, isn't this too little?! How can he agree?" Zhao Xiaohui scratched his head and felt that this mission was very troublesome.

"Do your best! Such a huge expenditure will definitely be deducted from the project bonus. For everyone's bonus, work hard! If you really can't come to an agreement, I'll try to discuss it with him again." Zhang Peiyong encouraged.

With such a huge burden, Zhao Xiaohui was almost knocked out by the pressure. In a daze, he walked out of the meeting room.